Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.cer
File:                     3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.cer (raw, json)
Hash identifier:          fKl2gG6zLj/s/btlZbzoFdFuqnk3GWQaCIx0GHv9gp8=
Subject key identifier:   3C:28:2E:5D:87:FF:F8:0B:AA:99:13:BD:A7:8E:36:ED:4D:1D:5D:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01FEDD443877B7A89C3DE4613DB44FF0C1EEE837
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jul 2026 16:51:22 +0000
Certificate not after:    Wed 28 Jul 2027 16:56:22 +0000
Subordinate resources:    AS: 267984
                          IP: 45.167.40.0/22
                          IP: 2804:5638::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fe:dd:44:38:77:b7:a8:9c:3d:e4:61:3d:b4:4f:f0:c1:ee:e8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 29 16:51:22 2026 GMT
            Not After : Jul 28 16:56:22 2027 GMT
        Subject: CN=3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:b2:c3:b1:67:08:bb:c4:97:23:c9:8f:b5:
                    24:1c:6b:49:1f:64:26:59:29:42:55:28:22:18:0b:
                    c3:64:64:92:5f:0b:ed:40:6d:ea:82:06:f4:67:e1:
                    76:a6:e2:68:35:47:c2:a0:56:5a:86:bc:68:2b:34:
                    81:3b:4e:0e:d3:fa:0e:ac:5b:cc:e8:03:dc:cb:3b:
                    64:53:78:10:3d:21:44:13:26:e4:3d:3f:30:19:d5:
                    a0:0f:67:83:4c:e9:44:f6:fe:0c:55:49:09:49:cf:
                    17:c4:e5:c0:cf:13:46:a0:0e:93:35:1f:7f:43:55:
                    63:c8:24:7a:56:0c:2c:25:34:d5:39:49:57:d0:2e:
                    cb:23:ed:39:c9:92:d2:9d:25:bb:ca:f2:2d:63:8f:
                    53:b5:de:10:6b:b9:df:f4:f9:67:ad:68:a7:02:f4:
                    f8:bd:5f:9e:08:5f:93:67:78:e7:f8:ef:c5:ac:fd:
                    2d:42:4b:57:51:03:66:72:07:07:ce:3a:97:17:ff:
                    81:58:cc:17:a1:3a:9d:e9:83:ce:d1:86:2e:11:90:
                    4e:f1:5b:03:f4:bd:89:5d:33:2c:2c:84:00:37:02:
                    21:c1:9d:be:86:e9:c9:22:6a:63:d3:e6:63:61:fb:
                    d1:ff:8a:99:40:c7:5e:ee:06:ed:78:8b:8d:48:41:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:28:2E:5D:87:FF:F8:0B:AA:99:13:BD:A7:8E:36:ED:4D:1D:5D:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.40.0/22
                IPv6:
                  2804:5638::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267984

    Signature Algorithm: sha256WithRSAEncryption
         9e:74:f0:e3:fc:88:09:d9:d1:10:12:ca:b1:43:76:36:1c:6c:
         25:91:71:7b:67:47:7e:0c:78:4d:83:e1:64:21:0b:20:34:9f:
         7e:64:91:14:c2:51:2a:b8:52:b8:47:cb:ee:1d:21:6d:9b:0a:
         d7:29:36:72:d7:81:db:87:7f:28:b7:ba:d0:94:1c:47:05:7e:
         ce:d1:03:91:6e:ab:6b:55:00:33:e1:2a:28:d9:f5:15:34:52:
         ef:2f:c4:74:66:7d:33:c0:58:cd:e3:fc:3c:d2:ed:b1:c5:1d:
         9f:03:d2:ab:d5:bc:5e:3f:34:10:d0:29:26:bd:6c:1e:e6:f3:
         9f:ff:96:65:37:77:2b:a7:3e:49:8d:00:d5:ae:a4:59:38:8a:
         a0:9c:2b:69:a0:22:ae:ea:0d:5a:28:02:5d:95:ee:f7:b5:06:
         68:91:30:71:be:72:88:45:64:2e:48:44:e7:3a:9c:35:6d:a6:
         c3:b4:8a:c4:23:4f:b3:1b:fe:4b:7e:16:32:83:b9:6c:c3:7a:
         86:52:16:5f:91:97:19:30:ba:2e:87:2c:e3:60:8b:a8:eb:42:
         89:32:c5:78:e3:15:1e:f4:ed:fc:78:03:e8:84:02:dc:e5:11:
         77:2f:ec:52:8d:6b:3c:7a:05:44:20:58:30:77:0e:d4:66:d3:
         13:59:76:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:22:18 2026 by rpki-client